
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa
File: aff52061-08df-3f5d-82f3-9bd999e3d55a.roa (raw, json)
Hash identifier: RymwsCymha3Tb1oHbUFEKnjZr2II6clU8L8MjsEpEaQ=
Subject key identifier: CB:E3:F0:7A:B3:11:56:17:98:02:B7:35:34:75:C0:29:14:CF:93:8A
Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683
Certificate serial: 010D0C9F4328584F268D00D4BEF4A1CCBD6F7B80
Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa
Signing time: Sat 12 Sep 2026 13:00:13 +0000
ROA not before: Sat 12 Sep 2026 13:00:13 +0000
ROA not after: Fri 11 Dec 2026 14:00:13 +0000
asID: 214208
IP address blocks: 140.235.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:26:8d:00:d4:be:f4:a1:cc:bd:6f:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683
Validity
Not Before: Sep 12 13:00:13 2026 GMT
Not After : Dec 11 14:00:13 2026 GMT
Subject: CN=6b1b292e-663f-42da-bb07-f42cd59c0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:47:2b:b5:8e:fb:7b:04:86:4e:60:cf:0a:
ac:6b:6c:41:6c:43:b6:b6:03:44:39:c2:1b:ba:2b:
37:fe:40:a7:7c:fd:b4:07:13:0f:cf:f1:fb:e6:57:
8f:37:3a:2b:68:63:5a:fa:a6:a2:1d:29:0b:cc:f8:
7d:e9:56:cb:77:00:43:62:cd:0d:dc:11:f2:89:e3:
ed:37:db:ba:f3:4d:f7:05:b1:6e:db:dc:8d:01:80:
1b:10:83:64:52:e1:cb:bd:3b:da:1d:2a:92:af:df:
41:8d:02:b2:64:0c:21:3a:94:06:50:25:9c:e9:bb:
2c:dc:44:35:47:12:b9:19:69:cc:2e:b9:36:d3:37:
04:71:91:ee:f5:ed:07:d6:cc:4a:44:59:10:0d:cc:
7c:d0:72:8a:83:75:7a:e4:71:2c:87:db:2a:22:6c:
d0:f6:87:a8:ae:13:60:2e:22:44:60:68:97:fa:84:
ff:dd:48:6d:12:c3:2e:e3:9c:46:f9:b0:fa:a9:f3:
57:da:94:10:34:9b:49:9a:d5:71:32:75:c8:f6:fc:
2b:7f:7c:99:43:be:f1:c5:68:01:7b:54:a9:8a:1c:
ee:ff:99:f9:26:ae:dc:9f:fc:7f:39:83:62:76:90:
af:d3:83:cf:71:95:51:37:42:ce:55:8e:bc:65:d2:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:F0:7A:B3:11:56:17:98:02:B7:35:34:75:C0:29:14:CF:93:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl
X509v3 Authority Key Identifier:
keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:f2:10:6d:e4:6d:0b:14:8d:73:70:b1:ae:25:56:66:8e:18:
03:26:04:45:e9:31:2d:cd:a3:22:35:1e:aa:07:bf:b4:fc:6a:
c9:89:89:bf:8d:dc:bc:9c:61:6c:7e:63:26:67:ae:bc:21:a6:
26:22:5b:85:bf:4b:0d:fe:a3:5b:d1:f9:65:bd:de:e3:d9:b5:
93:1e:9a:63:6a:2e:1f:66:22:16:a3:32:15:8c:0b:e5:df:0c:
2c:8b:b4:53:6c:1f:34:2b:c8:b2:9f:2d:6e:7a:d4:35:f6:fd:
60:e7:a8:39:10:bc:23:23:56:9f:18:88:55:01:a4:37:0e:32:
24:e8:b0:09:ec:c9:9d:ff:af:16:d3:e1:19:1a:ea:d8:67:ae:
dc:80:d0:c3:35:2d:70:d0:d6:cd:45:ad:7e:26:28:35:59:15:
29:5c:aa:5f:3c:1a:68:37:bd:55:24:1f:57:0e:e4:7c:58:9c:
cd:ad:95:80:4d:03:3a:3c:08:78:39:45:e7:a1:52:d3:5a:3b:
e5:c2:68:39:ac:80:f1:64:6d:af:e5:01:02:a9:41:7f:9e:a1:
94:ab:6c:6e:d2:1d:fc:4e:44:ac:23:6f:3d:e5:ae:79:9f:cf:
79:14:cd:80:bb:76:dc:7e:87:98:46:8c:4d:4d:28:48:4c:d4:
53:0a:40:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQDUvvShzL1ve4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2
NjgzMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk
NmIxYjI5MmUtNjYzZi00MmRhLWJiMDctZjQyY2Q1OWMwOTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRlHK7WO+3sEhk5gzwqsa2xBbEO2tgNEOcIb
uis3/kCnfP20BxMPz/H75lePNzoraGNa+qaiHSkLzPh96VbLdwBDYs0N3BHyiePt
N9u68033BbFu29yNAYAbEINkUuHLvTvaHSqSr99BjQKyZAwhOpQGUCWc6bss3EQ1
RxK5GWnMLrk20zcEcZHu9e0H1sxKRFkQDcx80HKKg3V65HEsh9sqImzQ9oeorhNg
LiJEYGiX+oT/3UhtEsMu45xG+bD6qfNX2pQQNJtJmtVxMnXI9vwrf3yZQ77xxWgB
e1Spihzu/5n5Jq7cn/x/OYNidpCv04PPcZVRN0LOVY68ZdIJ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvj8HqzEVYXmAK3NTR1wCkUz5OKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx
NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvYWZmNTIwNjEtMDhkZi0z
ZjVkLTgyZjMtOWJkOTk5ZTNkNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2
NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj
NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm
Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOtsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzyEG3kbQsUjXNwsa4lVmaOGAMmBEXpMS3NoyI1HqoHv7T8asmJib+N
3LycYWx+YyZnrrwhpiYiW4W/Sw3+o1vR+WW93uPZtZMemmNqLh9mIhajMhWMC+Xf
DCyLtFNsHzQryLKfLW561DX2/WDnqDkQvCMjVp8YiFUBpDcOMiTosAnsyZ3/rxbT
4Rka6thnrtyA0MM1LXDQ1s1FrX4mKDVZFSlcql88Gmg3vVUkH1cO5HxYnM2tlYBN
Azo8CHg5ReehUtNaO+XCaDmsgPFkba/lAQKpQX+eoZSrbG7SHfxORKwjbz3lrnmf
z3kUzYC7dtx+h5hGjE1NKEhM1FMKQLg=
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:22:50 2026 by rpki-client